CVE-2007-1624

Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php, as reachable through add_entry.php; and possibly other unspecified parameters and files. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

🔗 References (8)

• cve@mitrehttp://secunia.com/advisories/24602
• cve@mitrehttp://www.osvdb.org/34342
• cve@mitrehttp://www.securityfocus.com/bid/23072
• cve@mitrehttp://www.vupen.com/english/advisories/2007/1060
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24602
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/34342
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/23072
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/1060